I-Mylinking™ i-Inline Bypass Network Tap ngokuFumana ukubetha kwentliziyo

I-Mylinking™ i-Inline Bypass Network Cofa uFundo lweBeth yentliziyo esebenzayo

-Phucula ixesha langaphakathi

-Isilumkiso sokuSetyenziswa kweZithuthi ngokuNgaqhelekanga

- Thintela ukuNxibelela okanye ukuFaka koKhuseleko lweZixhobo zoKhuseleko olungaphakathi

-Ipakethi yokubetha kwentliziyo ukujonga imeko yenkqubo yezixhobo eziqhagamshelwe ngokuthe ngqo

-Umsebenzi we-Bypass wangaphandle, gcina inethiwekhi ngaphandle kokuphazamiseka ngexesha lokuphumla okanye ukugcinwa kwezixhobo ezidibeneyo

"Ukunyaniseka, ukusungula izinto ezintsha, ubungqongqo, kunye nokuSebenza" iya kuba yingcinga eqhubekayo yeshishini lethu kunye nexesha elide lokuseka kunye nabathengi ukuze baphinde baphinde bazuze kunye nenzuzo efanayo ye-Mylinking ™ Inline Bypass Network Tap kunye ne-Active Heartbeat Detection, siye sahlala. ngokunyanisekileyo ekujongeni phambili ekudaleni ubudlelwane obukhulu bentsebenziswano kunye nabathengi abavela ekhaya naphesheya kweelwandle ukwenza uhambo olude kunye.
"Ukunyaniseka, ukusungula izinto ezintsha, uBungqongqo, kunye nokuSebenza" iya kuba yingcamango eqhubekayo yeshishini lethu kunye nexesha elide lokuseka kunye nabathengi ukuze baphinde bazuze kwaye bazuze ngokufanayoUkufumanisa ukubetha kwentliziyo, I-Bypass engaphakathi, Ukutshintsha kwe-Bypass engaphakathi, I-Bypass Tap engaphakathi, Ukhuseleko lwangaphakathi, Sinikezela ngeenkonzo ze-OEM kunye namalungu okutshintsha ukuhlangabezana neemfuno ezahlukeneyo zabathengi bethu.Sinikezela ngexabiso elikhuphisanayo lezinto ezisemgangathweni kwaye siya kuqinisekisa ukuba ukuthunyelwa kwakho kulawulwa ngokukhawuleza lisebe lethu lolungiselelo.Sithemba ngokunyanisekileyo ukuba siya kuba nethuba lokudibana nawe kwaye sibone indlela esinokukunceda ngayo ukuqhubela phambili ishishini lakho.

1- Ushwankathelo

Ngokusebenzisa iMylinking™ Smart Bypass Switch:

• Abasebenzisi banokufaka ngokulula / bakhuphe izixhobo zokhuseleko kwaye aziyi kuchaphazela inethiwekhi yangoku kunye nokuphazamisa;
• I-Mylinking™ Network Tap Bypass Tshintsha kunye nomsebenzi wokubona impilo ekrelekrele ukuya esweni ngexesha lokwenyani lemeko yokusebenza yesiqhelo yesixhobo sokhuseleko, xa isixhobo sokhuseleko sisebenza ngaphandle, ukhuseleko luya kuzigqitha ngokuzenzekelayo ukugcina unxibelelwano oluqhelekileyo lwenethiwekhi;
• Itekhnoloji ekhethiweyo yokukhusela i-traffic ingasetyenziselwa ukuhambisa izixhobo ezithile zokhuseleko lokucoca i-traffic, iteknoloji ye-encryption esekelwe kwisixhobo sophicotho.Ukuqhuba ngokufanelekileyo ukukhuselwa kokufikelela kwi-serial yohlobo oluthile lwetrafikhi, ukukhulula uxinzelelo lokusingatha ukuhamba kwesixhobo sochungechunge;
• Itekhnoloji yoKhuseleko lweNdlela eLungileyo yoMlayisho ingasetyenziselwa ukuthunyelwa ngokudibeneyo kwezixhobo ze-serial ezikhuselekileyo ukuhlangabezana nesidingo sokhuseleko lwe-serial kwiindawo eziphezulu ze-bandwidth.

Ngophuhliso olukhawulezayo lwe-Intanethi, isoyikiso sokhuseleko lolwazi lwenethiwekhi luya lusiba lukhulu ngakumbi, ngoko ke iintlobo ezahlukeneyo zezicelo zokhuseleko lolwazi zisetyenziswa ngokubanzi nangakumbi.Nokuba sisixhobo solawulo lofikelelo lwemveli (firewall) okanye uhlobo olutsha lokhuseleko oluphucukileyo luthetha njengenkqubo yothintelo lokungena (IPS), iqonga elimanyeneyo lolawulo lwesisongelo (i-UTM), inkqubo yokuhlaselwa kwenkonzo yokukhanyela (Anti-DDoS), iAnti- i-span Gateway, i-DPI ye-Traffic Identification kunye neNkqubo yoLawulo oluManyeneyo, kunye nezixhobo ezininzi zokhuseleko zibekwe ngokulandelelana kwiindawo eziphambili zenethiwekhi, ukuphunyezwa komgaqo-nkqubo wokhuseleko wedatha ohambelanayo ukuchonga nokujongana ne-traffic esemthethweni / engekho mthethweni.Ngelo xesha, nangona kunjalo, inethiwekhi yekhompyutheni iya kuvelisa ukulibaziseka kwenethiwekhi enkulu okanye ukuphazamiseka kwenethiwekhi kwimeko yokungaphumeleli, ukugcinwa, ukuphuculwa, ukutshintshwa kwezixhobo kunye nokunye kwimeko yesicelo sothungelwano oluthembekileyo kakhulu, abasebenzisi abanakukwazi ukuma.

I-2-I-Network Tap Bypass Tshintshela Iimpawu eziPhezulu kunye noBuchwepheshe

I-Mylinking™ "SpecFlow" iModi yoKhuselo kunye neTekhnoloji yeModi yoKhuselo "iFullLink".
I-Mylinking™ iFast Bypass yokuTshintsha iTekhnoloji yoKhuseleko
ITekhnoloji yeMylinking™ “LinkSafeSwitch”
I-Mylinking™ “i-WebService” ye-Dynamic Strategy Forwarding/Issue Technology
ITekhnoloji yokuFumana iTekhnoloji yeMylinking ™ yokuBetha kwentliziyo ekrelekrele
ITekhnoloji yeTekhnoloji yeMylinking ™ yokuBetha kwentliziyo echazwayo
I-Mylinking™ iTekhnoloji yokuNxulumanisa iMithetho emininzi yokuLawulwa
I-Mylinking™ iTekhnoloji yoSasazo lweZithuthi ezikrelekrele
I-Mylinking™ iTekhnoloji yokuHlalanisa uMlayisho oDynamic
ITekhnoloji yoLawulo lweRemote ye-Mylinking™(HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Iimpawu)

3- ISikhokelo soLungiselelo lweTephu yeNethiwekhi yokuBypass

I-BYPASSIsilothi seModyuli yesiKhuseli:
Le slot ingafakwa kwimodyuli ye-BYPASS yokukhusela i-port kunye nesantya esahlukileyo / inombolo ye-port.Ngokutshintsha iintlobo ezahlukeneyo zeemodyuli, inokuxhasa ukukhuselwa kwe-BYPASS yeekhonkco ezininzi ze-10G / 40G / 100G.

HLOLAIsilothi seModyuli yePort;
Le slot ingafakwa kwimodyuli yezibuko ze MONITOR ezinezantya ezahlukeneyo/iizibuko.Iyakwazi ukuxhasa ezininzi i-10G/40G/100G ikhonkco kwi-intanethi yesixhobo sokubeka iliso kwi-intanethi ngokutshintsha iimodeli ezahlukeneyo.

Imithetho yokuKhethwa kweModyuli
Ngokusekwe kumakhonkco ahlukeneyo asetyenzisiweyo kunye nokubeka iliso kwiimfuno zokusasazwa kwezixhobo, unokukhetha ngokulula ulungelelwaniso lweemodyuli ezahlukeneyo ukuhlangabezana neemfuno zakho zokwenyani zokusingqongileyo;nceda ulandele le migaqo ilandelayo xa ukhetha:
1. Amacandelo e-chassis anyanzelekile kwaye kufuneka ukhethe amacandelo e-chassis phambi kokuba ukhethe ezinye iimodyuli.Kwangaxeshanye, nceda ukhethe iindlela ezahlukeneyo zobonelelo lwamandla (AC/DC) ngokweemfuno zakho.
2. Umatshini wonke uxhasa ukuya kuthi ga kwi-slots ye-module ye-BYPASS kunye ne-1 MONITOR slot module;awukwazi ukukhetha ngaphezu kwenani leendawo zokubeka ukuze uqwalasele.Ngokusekelwe kwindibaniselwano yenani lee-slots kunye nemodeli yemodyuli, isixhobo sinokuxhasa ukuya kuthi ga kwizikhuselo ezine ze-10GE zekhonkco;okanye inokuxhasa ukuya kuthi ga kwiikhonkco ezine ze-40GE;okanye inokuxhasa ukuya kuthi ga kwikhonkco elinye le-100GE.
3. Imodeli yemodyuli "BYP-MOD-L1CG" inokufakwa kuphela kwi-SLOT1 ukuze isebenze ngokufanelekileyo.
4. Uhlobo lwemodyuli "BYP-MOD-XXX" lunokufakwa kuphela kwi-slot yemodyuli ye-BYPASS;uhlobo lwemodyuli "MON-MOD-XXX" ingafakwa kuphela kwimodyuli yeslot ye-MONITOR yokusebenza okuqhelekileyo.

I-4- iNgcaciso ze-Bypass yeNethiwekhi ye-TAP

5- I-Network TAP Bypass Switch Application(njengoko kulandelayo)

Oku kulandelayo yi-IPS eqhelekileyo (i-Intrusion Prevention System), i-FW (Firewall) imodi yokuthunyelwa, i-IPS / FW isetyenziswe ngokulandelelana kwisixhobo sothungelwano (i-routers, switch, njl.) umgaqo-nkqubo wokhuseleko ohambelanayo ukumisela ukukhululwa okanye ukuvimba i-traffic ehambelanayo, ukufezekisa umphumo wokukhusela ukhuseleko.

Kwangaxeshanye, sinokujonga i-IPS / FW njengokuthunyelwa kweserial kwezixhobo, ngokuqhelekileyo zibekwe kwindawo ephambili yothungelwano lweshishini ukuphumeza ukhuseleko lwe-serial, ukuthembeka kwezixhobo zayo eziqhagamshelweyo kuchaphazela ngqo ukufumaneka kwenethiwekhi yeshishini ngokubanzi.Nje ukuba izixhobo ze-serial zigcwele, ukuphazamiseka, uhlaziyo lwesoftware, uhlaziyo lomgaqo-nkqubo, njl. njl., ukufumaneka kwenethiwekhi yeshishini lonke kuya kuchaphazeleka kakhulu.Kweli nqanaba, thina kuphela ngokusikwa kwenethiwekhi, i-jumper ye-bypass ebonakalayo inokwenza inethiwekhi ibuyiselwe, ichaphazela kakhulu ukuthembeka kwenethiwekhi.I-IPS / FW kunye nezinye izixhobo ze-serial kwelinye icala ziphucula ukuthunyelwa kokhuseleko lwenethiwekhi yeshishini, kwelinye icala kunciphisa ukuthembeka kothungelwano lwamashishini, ukwandisa umngcipheko womnatha awufumaneki.

5.2 I-Inline Link Series yoKhuselo lweZixhobo

I-Mylinking™ "I-Bypass Switch" ibekwe kuthotho phakathi kwezixhobo zenethiwekhi (iirutha, iiswitshi, njl. njl.), kunye nokuhamba kwedatha phakathi kwezixhobo zenethiwekhi akusakhokeleli ngqo kwi-IPS / FW, "Bypass Switch" kwi-IPS / FW, xa i-IPS / FW ngenxa yokugcwala, ukuphazamiseka, uhlaziyo lwesoftware, uhlaziyo lomgaqo-nkqubo kunye nezinye iimeko zokusilela, i "Bypass Switch" ngokubhaqwa komyalezo wokubetha kwentliziyo okrelekrele Umsebenzi wokufunyanwa kwangexesha, kwaye ngaloo ndlela utsibe isixhobo esingalunganga, ngaphandle kokuphazamisa indawo yothungelwano, izixhobo zenethiwekhi ezikhawulezayo eziqhagamshelwe ngokuthe ngqo ukukhusela uthungelwano oluqhelekileyo lonxibelelwano;xa IPS / FW ukusilela ukubuyiswa, kodwa ngokusebenzisa iipakethi zokubetha kwentliziyo ezikrelekrele Ukufunyanwa kokubhaqwa kwangexesha lomsebenzi, ikhonkco lokuqala ukubuyisela ukhuseleko lokhuseleko lwenethiwekhi yeshishini.

I-Mylinking™ "Bypass Switch" inomsebenzi onamandla wokuqonda ukubetha kwentliziyo, umsebenzisi unokwenza ngokwezifiso ukubetha kwentliziyo kunye nenani eliphezulu lokuzama kwakhona, ngomyalezo oqhelekileyo wokubetha kwentliziyo kwi-IPS / FW yovavanyo lwezempilo, njengokuthumela umyalezo wokujonga ukubetha kwentliziyo. ukuya phezulu / ezantsi izibuko IPS / FW, kwaye emva koko ufumane ukusuka kwizibuko eliphezulu / elisezantsi le-IPS / FW, kwaye ugwebe ukuba i-IPS / FW isebenza ngokuqhelekileyo ngokuthumela kunye nokufumana umyalezo wokubetha kwentliziyo.

5.3 “SpecFlow” Policy Flow Inline Traction Series Protection

Xa isixhobo sothungelwano sokhuseleko sifuna kuphela ukujongana netrafikhi ethile kuthotho lokhuseleko lokhuseleko, ngokusebenzisa iMylinking ™ "Bypass Switch" i-traffic per-processing umsebenzi, ngesicwangciso sokuhlola i-traffic ukudibanisa isixhobo sokhuseleko " Ixhala "i-traffic ithunyelwa ngqo ngqo. kwikhonkco lothungelwano, kwaye" icandelo letrafikhi elichaphazelekayo "kukutsalela kwisixhobo sokhuseleko esise-intanethi ukwenza uhlolo lokhuseleko.Oku akuyi kugcina kuphela ukusetyenziswa okuqhelekileyo komsebenzi wokukhangela ukhuseleko lwesixhobo sokukhusela, kodwa nokunciphisa ukuhamba okungahambi kakuhle kwezixhobo zokukhusela ukujongana noxinzelelo;kwangaxeshanye, i "Bypass Switch" inokubona imeko yokusebenza yesixhobo sokhuseleko ngexesha langempela.Isixhobo sokhuseleko sisebenza ngendlela engaqhelekanga sidlula ngokuthe ngqo ukugcwala kwedatha ukunqanda ukuphazamiseka kwenkonzo yenethiwekhi.

UMkhuseli weMylinking ™ weTrafikhi edlulayo inokuchonga itrafikhi esekwe kwi-L2-L4 umaleko we-header isazisi, esifana nethegi yeVLAN, umthombo / idilesi ye-MAC yendawo ekuyiwa kuyo, idilesi ye-IP yomthombo, uhlobo lwepakethi ye-IP, i-port yeprothokholi yothutho, ithegi yentloko yeprotocol, njalo njalo. kwi.Iindidi zeemeko ezihambelanayo indibaniselwano eguquguqukayo inokuchazwa ngokuguquguqukayo ukuchaza iintlobo ezithile zetrafikhi ezinomdla kwisixhobo esithile sokhuseleko kwaye zingasetyenziselwa ngokubanzi ukuthunyelwa kwezixhobo ezikhethekileyo zokuhlola ukhuseleko (RDP, SSH, uphicotho lwedatha, njl. .

5.4 Umthwalo olungelelanisiweyo woKhuseleko lweSeries

I-Mylinking™ "Bypass Switch" ibekwe kuthotho phakathi kwezixhobo zenethiwekhi (iirutha, iiswitshi, njl. njl.).Xa ukusebenza kwe-IPS / FW enye kunganelanga ukumelana nencopho yothungelwano lwetrafikhi, Umsebenzi wokulinganisa umthwalo wetrafikhi womkhuseli, "ukuhlanganiswa" kwe-IPS / FW yeqela lokucwangcisa ikhonkco lokunxibelelana kweqela, kunokunciphisa ngokufanelekileyo i-IPS enye / Uxinzelelo lwe-FW processing, ukuphucula ukusebenza ngokubanzi kokusebenza ukuhlangabezana ne-bandwidth ephezulu yendawo yokuthunyelwa kweBango.

I-Mylinking™ "i-Bypass Switch" inomsebenzi onamandla wokulinganisa umthwalo, ngokuhambelana nethegi ye-VLAN yesakhelo, ulwazi lwe-MAC, ulwazi lwe-IP, inombolo ye-port, iprotocol kunye nolunye ulwazi kwi-Hash yokuhambisa ukulinganisa ukuhanjiswa kwetrafikhi ukuqinisekisa ukuba i-IPS / FW nganye ifumene idatha. ukuhamba Ingqibelelo yeSeshini.

5.5 Ukhuseleko lweSixhobo esiSetyenziswayo seMilayini eHamba ngokuHamba (Tshintsha uQhagamshelwano lothotho ukuya kuQhagamshelwano oluFanayo)
Kwezinye iziqhagamshelo ezingundoqo (ezifana ne-intanethi, i-server yendawo yekhonkco yokutshintshiselana) indawo ihlala ibangelwa kwiimfuno zeempawu zokhuseleko kunye nokuthunyelwa kwezixhobo ezininzi zokuvavanya ukhuseleko kwi-line (ezifana ne-firewall, izixhobo zokuhlaselwa kwe-DDOS, i-WEB application firewall. , Izixhobo zokuthintela ukungena, njl.), izixhobo ezininzi zokufumanisa ukhuseleko ngexesha elifanayo kwi-series kwikhonkco ukunyusa ikhonkco lenqaku elilodwa lokungaphumeleli, ukunciphisa ukuthembeka okupheleleyo kwenethiwekhi.Kwaye kwizixhobo zokhuseleko ezikhankanywe ngasentla kwi-intanethi, ukuphuculwa kwezixhobo, ukutshintshwa kwezixhobo kunye neminye imisebenzi, kuya kubangela uthungelwano ixesha elide lokuphazamiseka kwenkonzo kunye neprojekthi enkulu yokusika isenzo ukugqiba ukuphunyezwa ngempumelelo kweeprojekthi ezinjalo.

Ngokusebenzisa i "Bypass Switch" ngendlela edibeneyo, indlela yokuthunyelwa kwezixhobo ezininzi zokhuseleko eziqhagamshelwe kuthotho kwikhonkco elifanayo linokutshintshwa ukusuka "kwimowudi yokudibanisa ngokomzimba" ukuya "kwindlela yokudibanisa ngokomzimba, imo yokudibanisa enengqiqo" Ikhonkco kwikhonkco Inqaku elinye lokungaphumeleli ekuphuculeni ukuthembeka kwekhonkco, ngelixa "i-bypass switch" kwi-link flowing kwi-traction traction, ukufezekisa ukuhamba okufanayo kunye nemo yendalo yesiphumo esikhuselekileyo sokusebenza.

Ngaphezulu kwesixhobo esinye sokhuseleko ngexesha elinye kwidayagram yokusasazwa kothotho:

Idiagram ye-Mylinking™ ye-TAP ye-Bypass Switch Deployment Diagram:

5.6 Ngokusekelwe kwiQhinga eliDynamic loKhuseleko lokuFumana uKhuseleko lweTraffic Traffic Traffic Strategy
"I-Bypass Switch" Enye imeko yesicelo esiphezulu isekwe kwisicwangciso esiguqukayo se-traffic traction yokhuseleko lwezicelo zokhuseleko, ukusasazwa kwendlela njengoko kubonisiwe ngezantsi:

Thatha "ukhuseleko lohlaselo lwe-Anti-DDoS kunye nokufumanisa" izixhobo zokuvavanya ukhuseleko, umzekelo, ngokubhengezwa kwangaphambili kwe "Bypass Switch" kwaye emva koko izixhobo zokukhusela iDDOS kwaye emva koko ziqhagamshelwe kwi "Bypass Switch", ngokwesiqhelo " Umkhuseli wokutsalwa "ukuya kwisixa esipheleleyo se-traffic wire-speed forwarding ngaxeshanye isibuko sokuhamba siphuma kwi" anti-DDOS isixhobo sokukhusela uhlaselo ", xa sibhaqiwe kumncedisi we IP (okanye icandelo lenethiwekhi ye-IP) emva kohlaselo," anti -Isixhobo sokukhusela ukuhlaselwa kweDDOS " siya kuvelisa imigaqo ehambelana nokuhamba kwetrafikhi ejoliswe kuyo kwaye iyithumele kwi "Bypass Switch" ngokusebenzisa ujongano lonikezelo lomgaqo-nkqubo oguqukayo.I "Bypass Switch" inokuhlaziya "i-traffic traction dynamic" emva kokufumana imigaqo-nkqubo eguquguqukayo yomgaqo-nkqubo "kwaye ngoko nangoko" umgaqo ubethe i-traffic server yohlaselo "ukutsalwa kwe-" anti-DDoS ukhuseleko lohlaselo kunye nokubhaqa "izixhobo zokusetyenzwa, ukuba esebenzayo emva kokuhamba kohlaselo kwaye iphinde ifakwe kwinethiwekhi.

Iskimu sesicelo esisekwe kwi "Bypass Switch" kulula ukuyiphumeza kunesitofu sendlela yeBGP yemveli okanye esinye isikimu sokutsalwa kwetrafikhi, kwaye okusingqongileyo kuxhomekeke kancinci kuthungelwano kwaye ukuthembeka kuphezulu.

"I-Bypass Switch" inezi mpawu zilandelayo ukuxhasa ukhuseleko lomgaqo-nkqubo oguquguqukayo wokhuseleko:
1, "Bypass Switch" ukubonelela ngaphandle kwemithetho esekelwe kwi-WEBSERIVCE interface, ukudibanisa lula kunye nezixhobo zokhuseleko lomntu wesithathu.
I-2, "i-Bypass Switch" esekelwe kwi-hardware ecocekileyo ye-ASIC chip idlulisa ukuya kwi-10Gbps yeepakethi ze-wire-speed ngaphandle kokuthintela ukuhanjiswa kokutshintsha, kunye "nelayibrari yokulawula i-traffic traction dynamic" kungakhathaliseki ukuba inani.
I-3, "I-Bypass Switch" eyakhelwe-ngaphakathi umsebenzi we-BYPASS wobuchwephesha, nokuba umkhuseli ngokwawo ukusilela, unokudlula ikhonkco loqobo lothotho ngokukhawuleza, alichaphazeli ikhonkco lokuqala lonxibelelwano oluqhelekileyo.